Nmap Development mailing list archives

Re: libpcap regression since 1.5.3


From: Daniel Miller <bonsaiviking () gmail com>
Date: Mon, 30 Mar 2015 12:59:21 -0500

Dario,

Thank you for the bug report. We've seen this behavior as well, and are
tracking it on our Issues page (http://issues.nmap.org/34). Previous
reporters have noted that using the included libpcap 1.5.3 (./configure
--with-libpcap=included) fixes the issue.

Dan

On Mon, Mar 30, 2015 at 9:18 AM, Dario Bertini <berdario () gmail com> wrote:

When running a SYN scan, a lot of probes are dropped, and this slows
down the scan terribly:

https://gist.github.com/berdario/9e2eecba0d35f9255f29

If I wait for the scan to finish, subsequent scans are faster
(probably until the network interface is torn down or anyhow until the
next reboot)

I reproduced the problem on Nixos, Ubuntu, Kali... and I recompiled
nmap with different versions of libpcap

1.5.3 and 1.7.2 (the latest) are affected
1.3.0 and 1.4.0 aren't

I can reproduce the problem while connecting to a machine on my
network, I haven't been able to reproduce the problem by scanning
localhost
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: